Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192B60/B32F3E7208E311ED83640C21C4F9AE02/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.mft
File:                     E-GJnCP-sH_hMWLrEDzDwDjXCCQ.mft (raw, json)
Hash identifier:          2BtzsE7gr+45AMhzALZ4fqyy7gffEaW7uFv/YRoBuoI=
Subject key identifier:   52:47:96:C3:80:AB:0E:E5:F4:2A:66:40:E2:B4:DB:12:77:19:C4:FD
Authority key identifier: 13:E1:89:9C:23:FE:B0:7F:E1:31:62:EB:10:3C:C3:C0:38:D7:08:24
Certificate issuer:       /CN=A9192B60/serialNumber=13E1899C23FEB07FE13162EB103CC3C038D70824
Certificate serial:       02D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192B60/B32F3E7208E311ED83640C21C4F9AE02/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.mft
Manifest number:          02D2
Signing time:             Sun 19 Oct 2025 03:30:58 +0000
Manifest this update:     Sun 19 Oct 2025 03:30:57 +0000
Manifest next update:     Sun 26 Oct 2025 03:30:57 +0000
Files and hashes:         1: E-GJnCP-sH_hMWLrEDzDwDjXCCQ.crl (hash: xK7lbMJ8cN94iaEitH48dKEn7Xa9D8DW/4Oxpx4/NI0=)
                          2: 2475821008E611EDA969EC24C4F9AE02.roa (hash: E9ZjpImIHc/AMVAiU1odnwPjIMCn1I66wy3ctNd9d5E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192B60/B32F3E7208E311ED83640C21C4F9AE02/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.crl
                          rsync://rpki.apnic.net/member_repository/A9192B60/B32F3E7208E311ED83640C21C4F9AE02/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 03:30:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 729 (0x2d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192B60, serialNumber=13E1899C23FEB07FE13162EB103CC3C038D70824
        Validity
            Not Before: Oct 19 03:30:57 2025 GMT
            Not After : Oct 26 03:30:57 2025 GMT
        Subject: CN=68f45b72-6091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:cf:c2:79:e2:07:01:de:89:2b:17:c0:ad:81:
                    bb:cc:91:0a:a3:97:b0:6a:2d:b2:ef:b9:30:34:0c:
                    c4:2e:e7:8d:ab:8c:97:f9:d9:5b:c1:59:68:31:4a:
                    a8:bc:3f:c0:c3:10:89:aa:6c:ea:ee:2b:d8:bf:35:
                    3f:e8:43:20:fc:eb:63:d0:84:48:77:9b:9d:c9:19:
                    20:68:4d:e6:9f:38:f1:34:84:6b:19:b3:4d:2b:d9:
                    bd:ad:5e:71:f1:f4:84:e3:da:b6:f5:7b:af:cf:91:
                    7a:e8:b0:6f:11:82:1e:c9:ce:4d:b2:52:34:d3:ec:
                    60:dc:72:36:9d:73:bc:79:6c:8b:b5:ab:ce:b5:1f:
                    1e:ee:0c:f9:81:27:01:a5:94:f3:5a:d6:73:00:92:
                    d3:2c:c8:f8:42:da:62:f3:d1:a1:45:2a:35:71:26:
                    b7:b7:c5:a7:3f:13:45:80:b0:a0:de:d6:a0:7b:81:
                    7c:3d:cf:4a:32:ae:91:28:00:c8:44:9c:12:09:18:
                    e6:bc:2e:d0:b6:78:a2:af:98:6c:7a:37:4c:74:05:
                    e3:c3:e3:9f:96:63:d5:ee:75:78:e4:5c:7d:bc:58:
                    21:bf:1a:d9:9f:17:d4:cb:80:3b:cf:a4:de:43:d7:
                    b8:5c:91:ca:ec:f1:3d:df:b7:83:62:f8:8f:3b:e2:
                    10:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:47:96:C3:80:AB:0E:E5:F4:2A:66:40:E2:B4:DB:12:77:19:C4:FD
            X509v3 Authority Key Identifier:
                keyid:13:E1:89:9C:23:FE:B0:7F:E1:31:62:EB:10:3C:C3:C0:38:D7:08:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192B60/B32F3E7208E311ED83640C21C4F9AE02/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192B60/B32F3E7208E311ED83640C21C4F9AE02/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:94:64:14:13:dc:e1:7f:9c:61:1a:2b:6a:e6:ea:32:58:b0:
         f6:38:05:4d:bf:dd:ed:01:16:2e:49:e2:a9:15:65:27:e9:0b:
         31:23:4f:81:cc:99:b6:0b:02:ad:50:58:bd:d2:48:59:24:ae:
         89:41:4d:29:75:91:e4:89:49:b8:9d:f8:3d:b2:64:94:9f:74:
         08:d8:7f:a2:ca:ec:cd:51:2d:55:a8:b1:53:fe:3e:25:59:51:
         b2:65:48:b9:e6:a6:ea:3a:e6:70:1e:e9:b9:0b:f8:28:bc:50:
         1a:76:be:6d:49:be:95:a5:61:57:2c:2c:b7:4c:f8:8f:dc:c0:
         06:89:3b:57:30:53:41:5d:2d:0e:af:24:4d:26:ae:14:8c:31:
         35:eb:c9:5e:4c:04:28:79:cf:a6:76:e3:2c:fd:58:b5:10:d6:
         61:43:15:3c:bd:b0:47:46:3e:f4:46:c8:96:7d:ff:c2:6b:69:
         a9:a3:f9:c4:f5:0d:72:56:42:f5:e5:a7:bd:76:e6:83:ae:6f:
         a5:9b:bd:f4:21:96:9d:21:40:8b:58:51:63:9f:95:33:3f:ba:
         0f:77:28:d1:70:78:a7:47:cd:48:b3:b8:88:b4:7d:4e:ab:e5:
         9b:1c:b9:f5:e6:1f:e6:e1:b6:ee:3a:7f:70:03:ef:67:37:73:
         48:35:55:e8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAtkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTJCNjAxMTAvBgNVBAUTKDEzRTE4OTlDMjNGRUIwN0ZFMTMxNjJFQjEwM0NDM0Mw
MzhENzA4MjQwHhcNMjUxMDE5MDMzMDU3WhcNMjUxMDI2MDMzMDU3WjAYMRYwFAYD
VQQDEw02OGY0NWI3Mi02MDkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmc/CeeIHAd6JKxfArYG7zJEKo5ewai2y77kwNAzELueNq4yX+dlbwVloMUqo
vD/AwxCJqmzq7ivYvzU/6EMg/Otj0IRId5udyRkgaE3mnzjxNIRrGbNNK9m9rV5x
8fSE49q29Xuvz5F66LBvEYIeyc5NslI00+xg3HI2nXO8eWyLtavOtR8e7gz5gScB
pZTzWtZzAJLTLMj4Qtpi89GhRSo1cSa3t8WnPxNFgLCg3tage4F8Pc9KMq6RKADI
RJwSCRjmvC7Qtniir5hsejdMdAXjw+OflmPV7nV45Fx9vFghvxrZnxfUy4A7z6Te
Q9e4XJHK7PE937eDYviPO+IQFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFJHlsOA
qw7l9CpmQOK02xJ3GcT9MB8GA1UdIwQYMBaAFBPhiZwj/rB/4TFi6xA8w8A41wgk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkI2MC9CMzJGM0U3MjA4
RTMxMUVEODM2NDBDMjFDNEY5QUUwMi9FLUdKbkNQLXNIX2hNV0xyRUR6RHdEalhD
Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0UtR0puQ1Atc0hfaE1XTHJFRHpEd0RqWENDUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MkI2MC9CMzJGM0U3MjA4RTMxMUVEODM2NDBDMjFDNEY5QUUwMi9FLUdKbkNQLXNI
X2hNV0xyRUR6RHdEalhDQ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCblGQUE9zhf5xhGitq5uoyWLD2OAVNv93tARYuSeKpFWUn6QsxI0+B
zJm2CwKtUFi90khZJK6JQU0pdZHkiUm4nfg9smSUn3QI2H+iyuzNUS1VqLFT/j4l
WVGyZUi55qbqOuZwHum5C/govFAadr5tSb6VpWFXLCy3TPiP3MAGiTtXMFNBXS0O
ryRNJq4UjDE168leTAQoec+mduMs/Vi1ENZhQxU8vbBHRj70RsiWff/Ca2mpo/nE
9Q1yVkL15ae9duaDrm+lm730IZadIUCLWFFjn5UzP7oPdyjRcHinR81Is7iItH1O
q+WbHLn15h/m4bbuOn9wA+9nN3NINVXo
-----END CERTIFICATE-----
Generated at Mon Oct 20 21:22:07 2025 by rpki-client